chore(envoy-gateway): bump envoy gateway to 1.8.2#711
Conversation
Standards Check (GR-079) — PASSEvery changed chart fully passes standards-check. |
🟢 Security Scan:
|
| Framework | Score |
|---|---|
| MITRE + NSA + SOC2 | 71.63059% |
✅ Security posture acceptable.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (1)
✅ Files skipped from review due to trivial changes (1)
📝 WalkthroughWalkthroughThis PR bumps the envoy-gateway Helm chart from v1.8.1 to v1.8.2, updating chart metadata, default image tags, related documentation, and unit test expectations. ChangesEnvoy Gateway version bump
Estimated code review effort: 1 (Trivial) | ~5 minutes Related issues: Suggested labels: chore, dependencies, envoy-gateway Suggested reviewers: helm-chart-maintainers 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@charts/envoy-gateway/README.md`:
- Around line 448-462: The release note in the Envoy Gateway README implies the
chart changes the managed Envoy proxy image, but the chart defaults in values
remain pinned to the same proxy tag. Update the wording in the v1.8.2 notes to
present this as a compatibility-matrix reference for proxy.image.tag rather than
a chart image change, or remove that sentence from the delta entirely. Use the
README section mentioning docker.io/envoyproxy/gateway:v1.8.2 and
docker.io/envoyproxy/envoy:distroless-v1.38.0 to adjust the phrasing.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro Plus
Run ID: 4a485965-d55d-4069-9a51-95fadd80f377
📒 Files selected for processing (7)
charts/envoy-gateway/Chart.yamlcharts/envoy-gateway/README.mdcharts/envoy-gateway/docs/certificates.mdcharts/envoy-gateway/tests/certgen_test.yamlcharts/envoy-gateway/tests/envoyproxy_config_test.yamlcharts/envoy-gateway/values.schema.jsoncharts/envoy-gateway/values.yaml
Closes #692.
Summary
docker.io/envoyproxy/gateway:v1.8.2.Upstream Evidence
docker.io/envoyproxy/gateway:v1.8.2linux/amd64,linux/arm64.docker.io/envoyproxy/gateway:1.8.2was checked and does not exist; the canonical upstream image tag keeps thevprefix.SecurityPolicy.spec.apiKeyAuth.extractFromadmission validation. The chart does not render SecurityPolicy resources by default, and the upgrade note documents the validation change for users with existing custom policies.Site Sync
Validation
make image-verify IMAGE=docker.io/envoyproxy/gateway:v1.8.2make image-verify IMAGE=docker.io/envoyproxy/gateway:1.8.2failed as expected because the non-prefixed tag is not published.make deps-check CHART=envoy-gatewayhelm unittest charts/envoy-gatewaypassed: 16 suites, 120 tests.make validate-chart CHART=envoy-gatewaypassed fully: 20 layers, including k3d behavioral validation for default and all CI values scenarios.make standards-check CHART=envoy-gatewaynode scripts/charts/template-standards-check.js --chart envoy-gatewaymake site-sync-check CHART=envoy-gatewaymake release-check REPO=chartsmake attribution-check REPO=chartsSummary by CodeRabbit